Privacy Policy

Xian Morning Agent

Last updated: 19 September 2026

Xian Morning Agent ("the App") is a personal automation assistant built and used by a single individual (the developer) to organize their own daily information — email-based expense tracking, calendar summaries, and personal spreadsheet record-keeping. The App is not distributed to, or intended for use by, the general public. This policy explains what data the App accesses via Google APIs, why, and how it is handled.

1. Who operates this App

This App is developed and operated by an individual developer for personal use only.

Contact: weixian2000@gmail.com

2. Google data the App accesses

The App connects to the developer's own Google Account using OAuth 2.0 and requests the following scopes:

Scope	Purpose
gmail.readonly	Reads the developer's own incoming bank/e-wallet transaction confirmation emails (e.g. PayNow, NETS QR receipts) in order to automatically log personal expenses. The App does not send, delete, or modify any email, and does not read email unrelated to transaction records.
calendar.readonly	Reads the developer's own calendar events to generate a personal daily morning summary. The App never creates, edits, or deletes calendar events.
spreadsheets	Reads and writes to a personal Google Sheet owned by the developer, used purely as a private expense-tracking ledger.

3. How the data is used and stored

• All data retrieved through these scopes is processed locally on the developer's own computer and is used solely to power personal automations (expense logs, daily briefings, spreadsheet updates).
• Derived data (e.g. parsed transaction amount, date, merchant name) may be stored locally in the developer's own files and in the developer's own Google Sheet.
• The App does not use the data for advertising, profiling, or any purpose unrelated to the personal automation described above.

4. Data sharing

Data obtained through these Google API scopes is never sold, rented, or shared with any third party. It is not used to train any general-purpose or third-party AI model beyond the developer's own personal, private automation scripts.

5. Data retention and deletion

OAuth credentials are stored locally on the developer's own machine and can be deleted at any time by removing the local token file. Access can also be revoked at any time from the developer's own Google Account permissions page. Revoking access immediately stops the App from accessing any further data.

6. Security

OAuth credentials are stored only on the developer's own local machine, are never transmitted to any external server other than Google's own OAuth endpoints, and are not accessible to any other person.

7. Changes to this policy

This policy may be updated from time to time to reflect changes in how the App uses Google data. The "Last updated" date above will reflect the latest revision.

8. Contact

Questions about this policy or the App's use of data can be directed to weixian2000@gmail.com.